The Change Healthcare cyber-attack, acknowledged by parent company UnitedHealth Group, affected approximately 190 million individuals, marking a substantial increase from earlier reports. As one of the largest healthcare payment processing entities in the U.S., Change Healthcare's security breach, with losses totaling $3.1 billion, is considered the most severe healthcare data breach recorded in 2024. Behind this damaging cybersecurity incident is the ALPHV/Blackcat ransomware group, leading to multiple lawsuits against UnitedHealth Group.
TPRM report: https://scoringcyber.rankiteo.com/company/unitedhealth-group
"id": "uni000032225",
"linkid": "unitedhealth-group",
"type": "Ransomware",
"date": "1/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': '190 million individuals',
'industry': 'Healthcare',
'location': 'U.S.',
'name': 'Change Healthcare',
'type': 'Company'}],
'description': 'The Change Healthcare cyber-attack, acknowledged by parent '
'company UnitedHealth Group, affected approximately 190 '
'million individuals, marking a substantial increase from '
'earlier reports. As one of the largest healthcare payment '
"processing entities in the U.S., Change Healthcare's security "
'breach, with losses totaling $3.1 billion, is considered the '
'most severe healthcare data breach recorded in 2024. Behind '
'this damaging cybersecurity incident is the ALPHV/Blackcat '
'ransomware group, leading to multiple lawsuits against '
'UnitedHealth Group.',
'impact': {'financial_loss': '$3.1 billion',
'legal_liabilities': ['multiple lawsuits']},
'ransomware': {'ransomware_strain': 'ALPHV/Blackcat'},
'regulatory_compliance': {'legal_actions': ['multiple lawsuits']},
'threat_actor': 'ALPHV/Blackcat ransomware group',
'title': 'Change Healthcare Cyber-Attack',
'type': 'Ransomware'}